diff --git a/src/components/platform-entry/usePlatformProfileCenterController.ts b/src/components/platform-entry/usePlatformProfileCenterController.ts
index 4a6206cc4..336e6f5ca 100644
--- a/src/components/platform-entry/usePlatformProfileCenterController.ts
+++ b/src/components/platform-entry/usePlatformProfileCenterController.ts
@@ -770,6 +770,9 @@ export function usePlatformProfileCenterController({
       return false;
     }
 
+    // TODO：小程序支付回跳通常仍是同一账号，当前风险很低；若以后支持支付期间切号或
+    // 跨 WebView 恢复，应持久化并校验 requestId + orderId + ownerUserId 后再采纳无
+    // 内存 pending order 的 hash。后端订单 owner 校验继续作为最终安全边界。
     const account = pendingOrder?.account ?? captureAccountLifecycle();
     if (!account.ownerUserId || !isAccountLifecycleCurrent(account)) {
       return false;